Closed binkley closed 3 months ago
Show how to provide an NVD API Key (DependencyCheck) without leaking it in your source code. This speeds up your build time for security.
A typical build warning:
[WARNING] An NVD API Key was not provided - it is highly recommended to use an NVD API key as the update can take a VERY long time without an API Key
An example pattern for Gradle or Maven is to put the key in the environment for local or CI, and to provide a command-line override via a property.
Relates to #466.
Show how to provide an NVD API Key (DependencyCheck) without leaking it in your source code. This speeds up your build time for security.
A typical build warning:
An example pattern for Gradle or Maven is to put the key in the environment for local or CI, and to provide a command-line override via a property.
Relates to #466.